[Condition][] When sid has permission to {action} {object}=
	$pc : PermissionCheck($perm : permission -> (permission == {action}), $sid : sid, $object : object)
	$target : IisEntity() from {object}($object)
	eval(hasPermission($sid, {action}+{object}))

[Consequence][] {action_type} permission=$pc.{action_type}();
